Sounds like a plan!For anyone interested, my Subversion forensics have determined that they used r657 to r659, based on the list of strings available in the dll, which means the code was grabbed June 2009. It looks increasingly like they directly imported the vgmstream project into their MSVC solution, instead of just ripping off FF7Music, as it had seemed at first.

[edit]I just realized that r659 is the latest version I have up on sourceforge, so the more likely scenario is that someone found the code there, it doesn't say anything about when they grabbed it.